My first project shipping to Europe was in 2019, a conveyor sorting system. Getting the CE mark then felt like passing a driving test: study the old rulebook, Machinery Directive 2006/42/EC, get a type examination from a notified body, bind the technical file, stick on the CE plate, ship. Brussels has now replaced the entire rulebook. The EU Machinery Regulation (EU) 2023/1230 becomes mandatory on 20 January 2027. Think of it this way: the syllabus changed, the road test gained new maneuvers, and all of Europe now reads from the same copy.
The principle first: what EU Machinery Regulation (EU) 2023/1230 actually changes
Why replace a directive that worked for nearly two decades? The 2020 Commission impact assessment was blunt: the old directive could not cover new technology. AI, IoT, and robotics barely existed when the 2006 text was written. The 27 member states each transposed the directive into national law, so enforcement varied, and nobody agreed on which conformity route high-risk machinery should take.
The biggest change is not a new clause but a new legal animal: from directive to regulation. A directive needs each country to transpose it; a regulation applies directly. One exam paper for all 27 states, no translation noise.
Get the timeline straight, because these dates come straight from the Official Journal: adopted 14 June 2023, published 29 June 2023, entered into force 19 July 2023, and fully applicable from 20 January 2027. That is a 42-month transition, and a small set of administrative articles already took effect early. The date to circle in red: from 20 January 2027, any machinery placed on the EU market must conform to the new regulation. There is no grace period for new placements.
The dividing line under the new Machinery Regulation: old vs. new in one table
| Dimension | Old Directive 2006/42/EC | New Regulation (EU) 2023/1230 |
|---|---|---|
| Legal form | Directive, transposed per country | Regulation, directly applicable EU-wide |
| Mandatory from | Current regime | 20 January 2027 |
| Instructions | Paper manual in the box by default | May be delivered digitally; paper on request |
| Cybersecurity | Not covered | New Annex III 1.1.9 "protection against corruption" and 1.2.1 on control-system reliability |
| AI / machine learning | Not covered | Self-evolving ML in safety functions lands on the high-risk list with mandatory third-party assessment |
| Substantial modification | Vague concept | Defined: a modification introducing new hazards or increasing risk makes the modifier the "manufacturer" |
| Safety component definition | Physical, digital, or mixed | Software explicitly included |
| Responsible parties | Mostly the manufacturer | Importers and distributors too, including used-machinery distributors |
| Document retention | Inconsistent | EU declaration of conformity and technical file kept at least 10 years |
| High-risk list | Directive Annex IV | Regulation Annex I, split into Part A (mandatory third-party) and Part B (old routes kept) |
| When standards are missing | Wait for harmonised standards | Commission may adopt "common specifications" |
The row that hurts most is Annex I. The old Annex IV high-risk list moved over and split into Part A and Part B. Part A is the hard core: six categories where a notified-body conformity assessment is mandatory, harmonised standards or not. Here they are, straight from the EUR-Lex text:
- Removable mechanical transmission devices, including their guards
- Guards for removable mechanical transmission devices
- Vehicle servicing lifts
- Portable cartridge-operated fixing and other impact machinery
- Safety components with fully or partially self-evolving behaviour using machine learning approaches ensuring safety functions
- Machinery embedding such systems without them being independently placed on the market (for those systems only)
Items 1 to 4 are old faces that warehouse equipment rarely touches. Items 5 and 6 are new, and they are aimed squarely at automation vendors.
Here is how the line falls for warehouse gear. Ordinary conveyors and sorters stay in Part B and keep the old route: self-declaration plus harmonised standards. An AGV or AMR whose safety obstacle-avoidance runs on deterministic logic (LiDAR plus hard-wired safety PLC logic) also keeps the old route. But the moment your safety function contains self-evolving machine learning, you drop into Part A items 5 and 6: mandatory third-party type examination, full stop. Safety laser scanners and safety controllers count too, because the definition of a safety component now explicitly includes software, and software version control just became part of your technical file.
Now let me fire a shot. Vendors plaster "AI-powered obstacle avoidance" across datasheets like it is a selling point. Under the new regulation, putting self-evolving machine learning into your safety function lands you on the Part A high-risk list with mandatory third-party assessment. An AI label on a safety function is not a bonus; it is a self-inflicted exam question.
The counter-intuitive conclusion: the smarter your AGV's safety function, the more expensive and slower its certification. The clever architecture does the opposite: freeze safety functions in deterministic logic, let AI handle path planning and task scheduling, and isolate safety from intelligence at the architecture level. That is the trade-off: zero machine learning in safety functions, and you mostly pay paperwork money; one percent, and you may pay for half a year of certification lead time plus a notified body's queue. A brake pad does not need to think. It needs to clamp in 50 milliseconds.
Substantial modification: the clause that hurts integrators most
Autumn 2024, a factory acceptance test for a customer shipping to the Netherlands. The line was tuned when a field engineer casually upgraded the safety PLC firmware and retimed the e-stop circuit, just "an optimization" in his mind. Under the new regulation, that is a "substantial modification": a change introducing new hazards or increasing risk turns the modifier into the "manufacturer," with a fresh conformity assessment, CE marking, and declaration of conformity. In the directive era, editing code on site was normal. In the regulation era, every casual change can promote you from integrator to manufacturer.
It is like renovating someone's house and knocking down a load-bearing wall on a whim. If the house has problems later, they are yours. So one job for 2026: add a "substantial modification review" gate to field changes. Touching safety wiring, safety software logic, or guards? Ask first: does this count as substantial?
The maintenance pitfalls: a 2026 punch list
Pitfall one, cybersecurity. Annex III 1.1.9 demands that safety functions be protected against "corruption," covering both malicious attacks and unintentional tampering; 1.2.1 demands safety and reliability of control systems, with software updates verified. In early 2026 a European industry group asked the Commission to postpone the cybersecurity provisions to December 2027, citing missing harmonised standards and an industry estimate of over one million euros per platform architecture (per industry press; the Commission decides). Postponed or not, the direction is fixed: safety-related software needs version traceability, and updates leave a record.
Pitfall two, digital documentation and the 10-year retention. Instructions may go digital, with paper on request, which saves printing costs. The price: digital instructions must stay accessible for the product's entire lifetime, and the declaration of conformity plus the technical file must be kept at least 10 years. Two years ago I helped a shuttle-vehicle vendor rebuild a CE file, and the safety assessment was scattered across three engineers' chat histories with mismatched versions. The notified body's verdict: that is not a technical file. A technical file is not paper in a drawer; it is your only witness when something goes wrong. Building a real document management process in 2026 beats everything else.
Pitfall three, the whole supply chain. Importers and distributors get explicit obligations, and used-machinery distributors are named. Refurbishing second-hand racking or stacker cranes for Europe? "I am just a reseller" no longer gets you out of the process. Pitfall four, common specifications: where harmonised standards are missing, the Commission can set "common specifications" directly. When choosing standards, do not bet everything on one standard number.
The 2026 punch list, ranked: gap analysis covering cybersecurity and the AI learning phase; check the six Part A categories and queue with a notified body if you are in them; software version control and update records; digitized instructions and a 10-year technical-file archive; a substantial-modification review for field work.
Is this money worth spending? Look at one number: what share of your safety functions runs on machine learning? Zero, and you walk the old road, paying mostly for documents and process. One percent, and you should be calling a notified body today and budgeting at least half a year of certification lead time. 20 January 2027 will not wait for anyone, and CE certificates do not grow on trees.
By Da Liu, Automation Engineer
